This document describes the AT-Command interface firmware of the ETRX2 and ETRX3 series
ZigBee PRO wireless meshing modules. It applies to the R305 firmware, which can be loaded on
to all products of the ETRX2 and ETRX3 module series, for example:
- ETRX351HR, ETRX357HR, ETRX351HR-LR, ETRX357HR-LR, ETRX351HR-LRS,
ETRX357HR-LRS
The Telegesis ZigBee modules have been designed to be built into any device and provide a low
cost, low power ZigBee solution based on the industry leading EmberZNet ZigBee stack.
Integration into a wide range of applications is made easy using a simple AT-style software
interface and advanced hardware design.
No RF experience or expertise is required to add this powerful wireless networking capability to
your products. Telegesis ZigBee Modules fast integration opportunities and the shortest possible
time to market for your product.
Important note
Using the AT-Command interface described in this document can shorten the time to market
significantly, however customers using the range of Telegesis modules also have the option of
using Ember‟s EZSP interface firmware or of developing custom firmware using the Ember
Development tools.
1.1 Document Overview
This document is meant as an AT-Command and S-Register reference for R3xx revisions of the
firmware based on EmberZNet3.x and EmberZNet4.x. In order to learn how your products can
benefit from wireless mesh networking please also refer to the following documents:
ETRX2/3 Product Manuals
R3xx Firmware User Guide
Migration guide for existing R2xx firmware customers
ETRX2/3 Development Kit User Guides
Application notes from www.telegesis.com
The ETRX2/3 Product Manuals concentrate on the hardware specification of the modules. The
Development Kit Product Manuals contain all of the information required to set up your
development kit and run firmware upgrades where necessary.
A network consists of a ZigBee Coordinator (ZC) which started the network, ZigBee Routers (ZR)
and ZigBee End Devices (ZED). There do not have to be any routers (other than the coordinator,
which functions as a router) or end devices in any given network. Each router can support up to
16 end devices (32 on the ETRX3 series) in any combination of non-sleepy, sleepy and mobile
End Devices. The network is always formed as a mesh according to the ZigBee PRO featureset of
the ZigBee standard; the tree structure is not available.
By default the module joins a PAN as a router, but modifying register S0A allows you to define it as
an end device. The coordinator is simply the device that first establishes the PAN, and it should
not be allowed to leave the PAN as it is not possible for a node that is already joined to the PAN to
take over the role of a coordinator or Trust Centre.
1.3 A Note on ZigBee® Compliance
The Telegesis R300 firmware has been tested and certified for MSP (manufacturer specific profile)
compliance by a test house appointed by the ZigBee Alliance.
This certification includes tests guaranteeing that:
- Modules running the Telegesis AT-Command set will not interfere with existing ZigBee
Networks in a malicious way
- Modules running the Telegesis AT-Command set can join a 3rd party ZigBee PRO network
and use its routing capabilities
- Modules running the Telegesis AT-Command set can allow 3rd party nodes to join into a
network consisting of Telegesis nodes and use its routing capabilities
In addition to implementing a manufacturer specific application profile the AT-Command set allows
for transparency allowing communication with 3rd party nodes running any public application
profile. In addition to this a transparent endpoint has been added allowing a host processor to
implement any public application profile in fully transparent mode.
If you want to use the term ZigBee or the ZigBee Logo in your product documentation the current
regulations state that you have to
(i) Be at least an adopting member of the ZigBee Alliance in the year you release your product
(ii) Implement a public application profile
If you intend to get your product certified feel free to contact Telegesis for additional information.
Also if you intend to build a product compliant to a public application profile (e.g. Home
Automation, Smart Energy) feel free to contact us to discuss your options.
1.4 Important notes
1.4.1 Hardware compatibility
R305 firmware will now run on the STRX2 series of modules.
R2xx firmware will not run on the ETRX3 series of modules.
1.4.2 Unexpected start-up in bootloader mode
The bootloader on the ETRX2 can be triggered using the command AT+BLOAD as described in
Section 2, but it can also be triggered in hardware. If the A/D2 pin is pulled low during the boot-up
of the module, the module will also enter the bootloader, so exercise caution when doing hardware
design and ensure that this pin is not grounded during start-up and reset. If unused the pad can
be left floating and a pull-up is not required.
In analogy to this pulling down PA5 during a reset will cause an ETRX3 series module to enter the
bootloader.
1.4.3 Compatibility with other devices
Most features of the R3xx Telegesis AT-Command line Interpreter are part of a Manufacturer
Specific Profile using the ZigBee PRO feature set of ZigBee 2007. Interoperability with other
devices that use the ZigBee PRO featureset is limited to a number of transparent commands.
R3xx is not compatible with earlier versions of ZigBee which are not implementing the ZigBee PRO
featureset, including Telegesis R2xx firmware. Also, it is not compatible with the ZigBee Smart
Energy profile as it lacks the required security key.
1.4.4 Persistence of network parameters
Once a device has joined a network as a coordinator, router or end device, it will retain its network
parameters if it is powered off and on again. It will still be a member of its original PAN, assuming
that PAN still exists, though an end device may need to find a new parent and it may have missed
an update of the network key. Certain S-registers will have been reset to default values, though,
which may change an end device‟s power mode for example.
2 AT Style Command Conventions
To simplify the communication with the modules, an AT-style command set, similar to the industry
standard Hayes modem control language, is used.
Each command must be preceded by the "AT" or "at" prefix. To terminate a command enter
<CR>. Any data not following this pattern is either not accepted by the module or will cause an
error message in response. Every command must be terminated with a <CR>, they cannot be
concatenated.
Commands are followed by an optional response that includes <CR><LF><Response><CR><LF>
and/or a prompt <CR><LF><Prompt><CR><LF> where the prompt could also be an error
message.
It is recommended to wait for an “OK” or “ERROR:XX” prompt before issuing the next command.
Any data which is prompted to the user is delivered in the format <CR><LF><prompt><CR><LF>.
Unless disabled in S0E or S0F prompts may appear whenever the corresponding event occurs.
Example:
<CR><LF><BCAST:000D6F000005A666,04=test><CR><LF>
A prompt intersecting a command being entered will not affect the command itself.
Commands ending with a „?‟ return the currently set value of the
parameter or parameters
Write Command
ATXXX=<…>
This command sets user-definable parameters as indicated by
the „=‟ sign.
Execute Command
ATXXX
This command executes routines of the module and returns
parameters
XX
8-bit hexadecimal number. Valid characters are 0-9, a-f and A-F
XXXX
16-bit hexadecimal number. Valid characters are 0-9, a-f and A-F
n
Number from 0-9
s
Sign
b
Bit (0 or 1)
c
character
<PID>
16-bit hexadecimal PAN ID (0000 to FFFF)
<EPID>
64-bit hexadecimal extended PAN ID
<channel>
decimal channel (802.15.4 channel 11-26)
<password>
8 character password
<EUI64>
64-bit IEEE 802.15.4 address in hexadecimal
<ioread>
32-bit hexadecimal number representing the reading of S1A
<data>
Custom Data
<ClusterList>
A list of 16 bit cluster identifiers in hexadecimal representation
<FirmwareRevision>
The Firmware Revision Number
Throughout this document, only the responses and prompts are presented, <CR><LF> are omitted
intentionally. Sequences of AT commands in a single line are not supported.
The ETRX2 and ETRX357 feature a 128-byte FIFO to buffer incoming characters from the host
processor, which is sufficient to hold even the longest possible command. The ETRX357 features
a 256 byte FIFO buffer for incoming radio messages, which allows rapid reception of multiple
messages without loss of characters. To prevent a buffer overflow XON/XOFF handshaking is
used. Optional hardware handshaking can be enabled as described in the register description of
S12 in section 4.
Table 1: Types of AT commands
When bit 7 of S12 is set each individual reply or prompt is additionally started with the STX and
ended with the ETX character to aid the interpretation of the incoming strings on a host processor.
2.1 Parameters
Each parameter must be entered in the correct format for any of the AT commands to execute
correctly. Optional parameters are marked with square brackets […].
Table 4 gives an overview of the ZigBee device types mentioned in this document.
Table 4: Device Overview
The terms Full Function device (FFD) and Reduced Function Device (RFD) are obsolete, but the
abbreviations are retained in the R302X firmware to avoid problems with users‟ legacy application
software.
Each coordinator or router can support up to sixteen End Devices, in any combination of Sleepy
End Devices and Mobile End Devices.
Only end devices should be put into a low-power state because routers and the coordinator must
always be powered up to maintain the network connectivity. ZigBee End Devices do not poll for
data, instead their incoming messages are relayed immediately by their parent without being
buffered. This means that ZEDs must not be put into a sleep mode.
2.3.2 Non-ZigBee types
Sink. The sink is a Telegesis feature. When a node is defined as a sink by setting S10 bit 4, it
can broadcast its address to the rest of the network. Other nodes can then send messages to the
sink node using AT+SCAST or various built-in functions. This simplifies the application software
since it is not necessary to know the EUI64 of the sink in advance. Devices discover the sink
when (1) they receive a regular advertisement broadcast from the sink (2) they are commanded to
send a message without knowing the sink address and bit 8 of S10 is set (the first sink-cast
message is therefore lost (3) the AT+SSINK command is used. To reduce traffic to end devices
they do not receive the advertisement broadcasts, but will be informed of the sink address when
they join the PAN. Otherwise, you should set bit 8 of S10 on end devices.
On modules manufactured before summer
2007 an invalid <DeviceName> is displayed.
This does not affect the functionality of the
module.
Response
Telegesis <DeviceName>
R<Firmware Revision>
<EUI64>
OK
Where <DeviceName> is the order code of the
device, <Firmware Revision> is the firmware
revision and <EUI64> is the Device‟s IEEE
802.15.4 identifier
SW release
R300 ●
Z – Software Reset
Execute Command
ATZ
Response
Module Performs a software reset
All non-volatile S Registers keep the user defined
values, if the module was part of a PAN it will
remain part of it.
SW release
R300 ●
&F – Restore Factory Defaults
Execute Command
AT&F
Response
Module Performs a factory reset
All non-volatile S Registers are updated with their
factory defaults and the node leaves the network it
is currently joined to.
SW release
R300 ●
+BLOAD – Enter The Bootloader Menu
Execute Command
AT+BLOAD
Response
<entering bootloader>
The device leaves the AT command line and
enters the bootloader menu for downloading new
firmware.
A description of the bootloading process can be
found in the Development Kit Product Manual.
Please note that the bootloader will run at a
baudrate of 115k2, no parity, 8 data bits regardless
of the current serial port settings.
+CLONE – Clone Local Node To Remote Node (ETRX2 Series only)
Execute Command
AT+CLONE:<EUI64>,<password>
Use on:
Source: FFD, COO
Destination: All device types
Notes
The default password for R3xx nodes is
“password”.
A description of the cloning process can be
found in the Development Kit Product
Manual.
Response
Cloning…
Remote Response
ENTERING BLOAD
or
ERROR<errorcode>
Where <errorcode> represents the error code
explained in section 3.
This command clones the firmware of the local
node to a remote node within the same PAN,
whose address is given by <EUI64>.
<password> represents the remote node‟s
8-character password. After completion a soft
reset is caused on the remote end.
SW release
R304 ●
+PASSTHROUGH – Pass new Firmware Image To Remote Node (ETRX3 Series Only)
Execute Command
AT+PASSTHROUGH:<EUI64>,<password>
Use on:
Source: FFD, COO
Destination: All device types
Notes
The default password for R3xx nodes is
“password”.
A description of the passthrough process can
be found in the Development Kit Product
Manual; it is the same procedure as cloning.
+RECOVER – Recover From A Failed Clone or Passthrough Attempt
Execute Command
AT+RECOVER
Use on:
Source: FFD, COO
Destination: All device types
Note
Use this command in cases where the
cloning (ETRX2 Series) or Passthrough
Bootloading (ETRX3 Series) operation was
interrupted and the target device therefore
remains in the bootloader. In case the target
device has been reset channel 13 must be
used for recovering.
For more information on over-the-air
firmware upgrading please refer to the
Development Kit Manual.
Response
Recovering…
or
ERROR<errorcode>
Where <errorcode> represents the error code
explained in section 3.
Enters clone (ETRX2 Series) or Passthrough
(ETRX2 Series) mode to a remote node which is
already in the bootloader.
XX is the S-Register which is to be read.
As an option for all 16 bit registers it is also
possible to address an individual bit only by
specifying the bit number [x]. For all 32 bit
registers it is possible to address an
individual bit by specifying the bit number in
hexadecimal [xx]
Response
<data>
OK
or ERROR:<errorcode>
The module displays the contents of S-register xx
or an error message, where <errorcode>
represents the error code explained in section 3.
All 16- and 32-bit registers can also be accessed
bit by bit. In order to do this [x[x]] may specify the
bit which is to be read. The result when reading a
single bit will always be 0 or 1.
Write Command
ATSXX[x[x]]=<data>[,<password>]
Examples
ATS00=3FFC
ATS0AE=1:password
Notes
Some S-Registers require a password for
write access. See S-Register description for
details. The default password for R3xx is “password”.
Some S-Registers are read-only and will
return an error if you are trying to write to
them.
When writing an individual bit by specifying
[x[x]], <data> can only be either 0 or 1.
Response
OK or ERROR:<errorcode>
The data is written to S-register number XX and if
applicable stored in non-volatile memory. The data
format for each individual S Register is given in the
S-Register description.
<errorcode> represents the error code explained in
section 3.
For all 16- and 32-bit registers individual bits can
also be set or cleared by specifying the bit using
hexadecimal [x[x]] and setting it to either 0 or 1.
Where <address> can be the remote node‟s
EUI64, NodeID or address table index and
XX is the S-Register which is to be read. As
an option for all 16 bit registers it is also
possible to address an individual bit only by
specifying the bit number [X]. For all 32 bit
registers it is possible to address an
individual bit by specifying the bit number in
hexadecimal [xx]
The result when reading a single bit will
always be 0 or 1.
Response
SEQ:XX
OK
or ERROR:<errorcode>
The module asks for the contents of the remote S-
register using a unicast. The sequence number of
the unicast is displayed (an ACK or NACK prompt
will follow). <errorcode> represents the error code
explained in section 3.
Where NodeID is the remote NodeID, EUI64 is the
remote EUI64, Register is the S-Register which
was read and <errorcode> is indicating the
success (00) or failure of the read operation. The
contents of the remote S-Register are following in
case of a successful read only.
Write Command
ATREMS:<address>,XX[x[x]]=<data>
[,<password>]
Examples
ATREMS:000D6F0000012345,00=3FFC
ATREMS:000D6F0000012345,0AE=1:passw
ord
Where <address> can be the remote node‟s
EUI64, NodeID or address table index and
XX is the S-Register which is to be written.
As an option for all 16- and 32-bit registers it
is also possible to address an individual bit
only by specifying the bit number [x[x]].
Notes
Some S-Registers require a password for
write access. See S-Register description for
details. The default password for R3xx is “password”.
Some S-Registers are read-only and will
return an error if you are trying to write to
them.
When writing an individual bit by specifying
[x[x]], <data> can only be either 0 or 1.
Response
SEQ:XX
OK
or ERROR:<errorcode>
The data is written to the remote S-register number
XX and if applicable stored in non-volatile memory.
The data format for each individual S Register is
given in the S-Register description.
The sequence number of the unicast is displayed
(an ACK or NACK prompt will follow). <errorcode>
represents the error code explained in section 3.
Prompt
SWRITE:<NodeID>,<EUI64>,<errorcode >
Where <NodeID> is the remote NodeID, <EUI64>
is the remote EUI64. Only in case the errorcode is
00 the write operation has been completed
successfully.
multicast IDs or
FFFF - Broadcast to all devices
FFFD - Broadcast to all non-sleepy devices
FFFC – Broadcast to all Routers
Notes
Some S-Registers require a password for
write access. See S-Register description for
details. The default password for R3xx is “password”.
Some S-Registers are read-only and cannot
be written to.
Response
OK or ERROR:<errorcode>
The data is written to the remote S-register number
XX on all nodes addressed by the multicast group
ID. The data format for each individual S Register
is given in the S-Register description.
<errorcode> represents the error code explained in
section 3.
For all 16- and 32-bit registers individual bits can
also be set or cleared by specifying the bit using
hexadecimal [x[x]] and setting it to either 0 or 1.
SW release
R300 ●
+TOKDUMP – Display All S-Registers
Execute Command
AT+TOKDUMP
Notes
Only used on the local node. You cannot
display all the registers of a remote device.
Response
<data>
OK
The module displays the contents of all local SRegisters. The data format for each individual S
Register is given in the S-Register description in
section 4.
The results are the background radio power
in each channel, not the RSSI of incoming
ZigBee packets
Response
+ESCAN:
11:XX
12:XX
…
26:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3. XX represents the average energy on
the respective channel (see description in Section
8). Channels masked out in S00 are not scanned.
SW release
R300 ●
+PANSCAN – Scan For Active PANs
Execute Command
AT+PANSCAN
Use on:
All nodes
Note
Scanning for active PANs can take up to 4
seconds.
Response
+PANSCAN:<channel>,<PID>,<EPID>,XX,b
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3. The node gives a list of all PANs found.
<channel> represents the channel, <PID> the PAN
ID, <EPID> the extended PAN ID, XX the ZigBee
stack profile (00 = Custom, 01 = ZigBee, 02 =
ZigBee PRO) and b indicates whether the network
is allowing additional nodes to join (1 = joining
permitted). The node does not join any of the
PANs found.
When issuing this command the local device
becomes a Coordinator (and Trust Centre).
Establishing a PAN can take up to 16
seconds.
This command can only be executed if the
local node is not part of a PAN already.
Response
JPAN:<channel>,<PID>,<EPID>
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
The local node becomes a coordinator and
performs an energy scan on all channels selected
in S00. It then starts a PAN with a random unused
PAN ID and extended PAN ID on the quietest
channel. If a PAN ID and/or extended PAN ID is
specified in S02 or S03 the provided IDs are used
instead of random ones, given the selected IDs are
not already in use by other networks within range
SW release
R300 ●
+JN – Join Network
Execute Command
AT+JN
Use on:
All nodes which are not part of a PAN
Note
Joining a PAN can take up to 4 seconds,
depending on the number of channels which
need scanning.
This command can only be executed if the
local node is not part of a PAN already.
Response
JPAN:<channel>,<PID>,<EPID>
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
The local node scans all channels selected in
register S00 for the existence of a PAN. When
finding any PAN which allows joining it will
automatically join in via the remote node with the
highest RSSI.
In case registers S02 and S03 differ from the
default value of all zeros the node will only join a
PAN with the specified Pan ID and/or extended
PAN ID.
This command can only be executed if the
local node is not part of a PAN already.
The JPAN command ignores the channel
mask in register S00 and the PID and EPID
settings in S02 and S03.
Response
JPAN:<channel>,<PID>,<EPID>
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
The local node joins a particular PAN on
<CHANNEL> with the specified <PID> or <EPID>
via the remote node with the highest RSSI.
“Silent” joining is joining via the
commissioning method. All data required to
enter the network is provided to the node, so
that no joining procedure itself is required.
The node will appear in the target network
without any joining procedure given the
supplied data is correct.
<channel> is a decimal number
Other parameters are hexadecimal
Use on
All joining Devices
Example
AT+SJN:11,000D6F00000AAAD0,AFFE,00
Response
JPAN:<channel>,<PID>,<EPID>
OK
or ERROR:<errorcode>
>
<errorcode> represents the error code explained in
section 3.
The local node will become part of the network with
the channel specified in <channel>, the trust centre
EUI64 specified in <TC EUI64>, the NodeID of the
network manager specified in <NM NodeID>, the 8
bit network update ID specified in <nwk update
ID>, the network key provided in S08, the trust
centre link key provided in S09, the PAN ID
provided in S02 and the extended PAN ID provided
in S03. It is assumed that the key-sequencenumber of the network key is 0 when issuing this
command.
Use with care on a Coordinator. It will not be
able to rejoin the PAN
Response
OK or ERROR<errorcode>
Prompt
LeftPAN
<errorcode> represents the error code explained in
section 3.
Instruct local device to leave the PAN.
SW release
R300 ●
+DASSR – Disassociate Remote Node from PAN (ZDO)
Execute Command
AT+DASSR:<address>
Where <address> can be a node‟s EUI64,
NodeID or address table index
Use on
All Devices
Note
Use with care when targeting a Coordinator.
It will not be able to rejoin the PAN
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
Instruct device to leave the PAN.
Remote Action
Node leaves PAN
Prompt
LeftPAN
SW release
R300 ●
+N – Display Network Information
Read Command
AT+N?
Use on
All Devices
Response
+N=<devicetype>,<channel>,<power>,<PID>,<EPID>
or +N=NoPAN
followed by
OK
<devicetype> represents the node‟s functionality in the
PAN (FFD,COO,ZED,SED,MED), <power> the node‟s
output power in dBm, <channel> the IEEE 802.15.4 radio
channel (11-26), <PID> the node‟s PAN ID and <EPID>
the node‟s extended PAN ID.
Where XX is the start index of the
remote LQI table and <address> can be
the remote node‟s EUI64, NodeID or
address table entry.
Note: Also the local node can be the
target of this command (e.g. use
address table entry FF as the address)
Use on
FFD, COO as the target device
Response
SEQ:XX
OK or ERROR<errorcode>
This command requests the target node to respond by
listing its neighbour table starting from the requested
index. Can be used to find the identity of all ZigBee
devices in the network including non-Telegesis devices.
Prompt (example)
NTable:<NodeID>,<errorcode>
Length:03
No.| Type | EUI | ID | LQI
00.| FFD | 000D6F000015896B | BC04 | FF
01.| FFD | 000D6F00000B3E77 | 739D | FF
02.| FFD | 000D6F00000AAD11 | 75E3 | FF
In this example the neighbour table of the remote node
with the short ID shown in <NodeID> contains three
entries (hexadecimal), which are displayed. In case the
table contains more than three entries it may be required
to repeat this command and increase the index count
until the full table is derived.
In case of an error an errorcode other than 00 will be
displayed and the prompt will end after the errorcode.
Where XX is the start index of the
remote Routing table and <address>
can be the remote node‟s EUI64,
NodeID or address table entry.
Note: Also the local node can be the
target of this command (e.g. use
address table entry FF as the address)
Use on
FFD, COO as the target device
Response
SEQ:XX
OK or ERROR<errorcode>
This command requests the target node to respond by
listing its routing table starting from the requested index.
Prompt (example)
RTable:<NodeID>,<errorcode>
Length:40
No.| Dest | Next | Status
00.| 1234 | ABCD | 00
01.| 4321 | 739D | 00
02.| 0000 | 0000 | 03
In this example the routing table of the remote node with
the short ID shown in <NodeID> contains 64 entries
(hexadecimal 0x40), of which the first three are
displayed. When the table contains more than the
displayed entries it may be required to repeat this
command and increase the index count until the full
table is derived.
The status shown is as described in table 2.128 of the
ZigBee Specification.
In case of an error an errorcode other than 00 will be
displayed and the prompt will end after the errorcode.
address table entry and XX is an optional
index number. In case an index number is
provided, an extended response is requested
asking the remote device to list its associated
devices.
Sends a broadcast to obtain the specified
Device‟s NodeID and optionally also
elements of its associated devices list.
Use on
All Devices
Note
Providing FF as an address table entry
addresses the local node
Response
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
In case of an error an errorcode other than 00 will
be displayed and the prompt will end after the
errorcode.
<EUI64> is the Remote node‟s EUI64 and
<NodeID> is its NodeID. In case an extended
response has been requested the requested
NodeIDs from the associated devices list are listed
as well.
SW release
R302 ●
+EUIREQ – Request Node’s EUI64 (ZDO)
Execute Command
AT+EUIREQ:< Address>,<NodeID>[,XX]
Where <Address> is the EUI64, NodeID or
address table entry of the node which is to
be interrogated about the node with the
NodeID specified in <NodeID>. XX is an
optional index number. In case an index
number is provided, an extended response is
requested asking the remote device to list its
associated devices.
Sends a unicast to obtain the specified
device‟s EUI64 and optionally also elements
of its associated devices list (extended
response).
Use on
All Devices
Note
Providing FF as an address table entry
addresses the local node
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
In case of an error an errorcode other than 00 will
be displayed and the prompt will end after the
errorcode.
<EUI64> is the Remote node‟s EUI64 and
<NodeID> is its NodeID. In case an extended
response has been requested the requested
NodeIDs from the associated devices list are listed.
As with all unicasts after successful transmission
the sequence number of the unicast is stated using
the “SEQ:XX” prompt. When acknowledged (or
not) the accompanying “ACK:XX” (or “NACK:XX”)
Where <Address> is the EUI64, NodeID or
Address table entry of the node which is to
be interrogated about the node with the
NodeID specified in <NodeID>.
Sends a unicast to obtain the specified
device‟s node descriptor.
Use on
All Devices
Note
Providing FF as an address table entry
addresses the local node
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
+POWERDESC – Request Node’s Power Descriptor (ZDO)
Execute Command
AT+POWERDESC:<Address>,<NodeID>
Where <Address> is the EUI64, NodeID or
Address table entry of the node which is to
be interrogated about the node with the
NodeID specified in <NodeID>.
Sends a unicast to obtain the specified
device‟s power descriptor.
Use on
All Devices
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
In case of an error an errorcode other than 00 will
be displayed and the prompt will end after the
errorcode
<NodeID> is the Remote node‟s NodeID. In
addition the power descriptor is displayed as a 16
bit hexadecimal number as described in section
2.3.2.4. of the ZigBee specification.
As with all unicasts after successful transmission
the sequence number of the unicast is stated using
the “SEQ:XX” prompt. When acknowledged (or
not) the accompanying “ACK:XX” (or “NACK:XX”)
prompt is displayed.
SW release
R302 ●
+ACTEPDESC – Request Node’s Active Endpoint List (ZDO)
Execute Command
AT+ACTEPDESC:<Address>,<NodeID>
Where <Address> is the EUI64, NodeID or
Address table entry of the node which is to
be interrogated about the node with the
NodeID specified in <NodeID>.
Sends a unicast to obtain the specified
device‟s active endpoint list.
Use on
All Devices
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
Prompt
ActEpDesc:<NodeID>,<errorcode>[,XX,…]
In case of an error an errorcode other than 00 will
be displayed and the prompt will end after the
errorcode<NodeID> is the Remote node‟s NodeID. In
addition all active endpoints are listed as 8-bit
hexadecimal numbers separated by commas.
As with all unicasts after successful transmission
the sequence number of the unicast is stated using
the “SEQ:XX” prompt. When acknowledged (or
not) the accompanying “ACK:XX” (or “NACK:XX”)
Where <Address> is the EUI64, NodeID or
Address table entry of the node which is to be
interrogated about the node with the NodeID
specified in <NodeID> and XX is the number
of the endpoint, which simple descriptor is to
be read.
Sends a unicast to obtain the specified
device‟s active endpoint list.
Use on
All Devices
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
In case of an error an errorcode other than 00 will
be displayed and the prompt will end after the
errorcode
<NodeID> is the Remote node‟s NodeID. In
addition all active endpoints are listed as 8 bit
hexadecimal numbers separated by commas.
As with all unicasts after successful transmission
the sequence number of the unicast is stated using
Where <ProfileID> Required profile ID of the
device being searched for followed by a
specification of required input and output
clusters.
If a remote node has a matching ProfileID
and matches at least one of the specified
clusters it will respond to this broadcast
listing the matching endpoint(s).
<NumInClusters> and <NumOutClusters>
must be 2 hexadecimal digits
Example
at+matchreq:C091,01,0002,02,0004,000B
Use on
All Devices
Response
SEQ:XX
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
section 3.
Prompt
MatchDesc:<NodeID>,<errorcode>,XX,…
In case of an error an errorcode other than 00 will
be displayed and the prompt will end after the
errorcode.Where <NodeID> is the Remote node‟s NodeID.
In addition all endpoints of this node matching the
search criterion are listed as 8 bit hexadecimal
numbers separated by commas.
SW release
R302 ●
+ANNCE – Announce Local Device In The Network (ZDO)
Execute Command
AT+ANNCE
Send a ZigBee device announce Broadcast
announcing the local node on the network.
Use on
All Devices
Response
OK or ERROR<errorcode>
<errorcode> represents the error code explained in
The prompt above will be displayed on all nodes
which can hear the announcement. In case bit C
of register S10 is set the RSSI level (syy dBm) and
LQI (zz in hexadecimal) of the last hop are
displayed. For a description of the LQI reading
please see section 7.
<EUI64> is the identifier and <NodeID> the
NodeID of the sending device
Set the source route of a message sent to a
remote device, starting with the NodeID of
the remote device followed by all NodeIDs on
the route from the remote node to the local
node
Use on
All Devices
Note: Setting up invalid routes may lead to
listed devices becoming unavailable. To
confirm a route use AT+FNDSR.
Response
OK
or
ERROR<errorcode>
<errorcode> represents the error code explained in
section 3.
Stores route information for up to 30 hops which
will be used when sending any message to a
remote node, which is part of the listed devices.
SW release
R300 ●
+FNDSR – Find the Source Route to a remote device
Execute Command
AT+FNDSR:<address>
Where <address> can be the remote node‟s
EUI64 or address table index
Tries to find source route information to the
specified device by sending a ZDO request
to the remote device and thus triggering a
reply.
Use on
Sink, COO
Use on
A Sink
Response
OK
or
ERROR<errorcode>
Prompt
SR:XX,<EUI64>,<NodeID>,<NodeID>…
Where XX represents the number of hops to the
remote node, EUI64 its EUI64 number followed by
a list of NodeIDs starting with the remote node
listing all nodes along the path to the local node
<errorcode> represents the error code explained in
section 3.
Poll the parent device for new data.
Note: Action 0010/8010 is recommended for
periodic polling using the built-in timers.
Use on
SED, MED
Response
OK
or
ERROR<errorcode>
<errorcode> represents the error code explained in
section 3.
SW release
R300 ●
+REJOIN – Rejoin the network
Execute Command
AT+REJOIN:b
If b is set to 0 join without the known network
key (unencrypted) and if b is set to 1 join
encrypted.
Use on
SED,MED
Notes
Polling a parent on an end device that has
lost its parent will automatically call
AT+REJOIN:1. Furthermore functionality
0012 and 0013 make use of this command.
Response
OK
or
ERROR<errorcode>
If the contact with the network has been lost
because an end device has lost its parent, the
network has changed channel, or updated its
encryption key the command AT+REJOIN can be
used to rejoin the network.
<errorcode> represents the error code explained in
section 3.
All Telegesis devices which are up to nn
hops away are listed. If nn = 01 only direct
neighbours will reply and nn = 00 will search
the entire network.
Use on
COO, SINK
Notes
- In case no parameter is specified for
nn, 30 is used by default.
- If used on nodes other than the COO
and a sink the command may be
unreliable
<errorcode> represents the error code explained in
section 3. In case bit C of register S10 is set the
RSSI level (syy in dBm) and LQI (zz in
hexadecimal) of the last hop are displayed. For a
description of the LQI reading please see
section 7. Source route messages may also be
displayed.
SW release
R302 ●
+KEYUPD – Update the Network Key
Execute Command
AT+KEYUPD
Updates the Network Key with a new random
key.
Use on
Trust Centre
Note
Can only be used on the Trust Centre
Response
OK
or
ERROR<errorcode>
<errorcode> represents the error code explained in
section 3.
Local Device takes over the Trust Centre.
Can only be used if no other device in the
network is Trust Centre (i.e. the network has
been started in distributed Trust Centre
mode)
Use on
Router that established the PAN in
distributed TC Mode
Note
Can only be used if Network has been
started as non-TC network (bit 9 of S0A set).
Response
OK
or
ERROR<errorcode>
<errorcode> represents the error code explained in
section 3.
SW release
R302 ●
+BECOMENM – Make the local device Network Manager
Execute Command
AT+BECOMENM
Local Device takes over role of Network
Manager. By default the COO is the Network
Manager, but any other router in the network
can take over this responsibility. The
Network Manager can change the radio
channel and the PAN ID.
Use on
Router
Response
OK
or
ERROR<errorcode>
<errorcode> represents the error code explained in
section 3.
Ask all nodes in the network to change their
channel. If no channel is specified a random
channel out of the channels masked in S00
is picked which wasn‟t previously blacklisted
because of excessive packet loss (NM:ES REPORT WARNING prompt)
Use on
Network Manager
Note
The New channel needs to be masked in in
S00 for all nodes on the network. Ideally S00
should be identical for all nodes on a
network.
Response
OK
or
ERROR<errorcode>
<errorcode> represents the error code explained in
section 3.
Parameters
Optional XX ranging from 0B to 1A
SW release
R304 ●
+ATABLE – Display Address Table
Read Command
AT+ATABLE
Use on
All Devices
Notes
Entry 05 contains the address of the node‟s
sink. The user can overwrite it to manually
select a different sink.
The address table is volatile and its contents
are lost if the device is powered down.
Response
No. | Active | ID | EUI
00 | N | 0000 |000D6F0000012345
(…)
OK
The Address Table contains nodes which can be
addressed by referring to the corresponding
address table entry. The “Active” column shows
nodes to which a message is currently in flight.
The multicast table contains all multicast IDs which
will be received by the local node.
SW release
R300 ●
+MSET – Set Multicast Table Entry
Read Command
AT+MSET:XX,<ID>,<endpoint>
Where XX is the index number of the
multicast-table entry which is to be written.
For the AT-Command interface operation the
endpoint should always be set to 01.
Use on
All Devices
Response
OK
or ERROR:<errorcode>
<errorcode> represents the error code explained in
Note: Use broadcasts sparingly! The ZigBee
specification only allows any node to repeat
or originate up to 8 broadcasts in every 8
second interval. Broadcasts use a lot of
bandwidth.
Response
OK or ERROR<errorcode>
Where <errorcode> represents the error code
explained in section 3.
Parameters
nn ranging from 00 to 30
A maximum of 82 bytes are sent (with attached
EUI only 74 bytes). The response OK shows
successful transmission. Successful transmission
does not guarantee successful reception. To make
sure data has been received by a specific node
use a unicast message. Only neighbours which
are up to nn hops away will receive the broadcast.
If nn = 01 only direct neighbours will receive the
broadcast and if n = 00 the entire network will
(max. 30 hops).
Remote action
Prompt
BCAST:[<EUI64>,]<length>=<data>
Every node in the PAN which has received the
broadcast message will prompt the above
message where <EUI64> is the address of the
sender, <length> is the length of the payload and
<data> is the data which was attached to the
broadcast. The EUI64 is only displayed if it is part
of the network header (set bit 0 of S10 to disable
attaching the EUI64 to outgoing messages).
Where nn is the number of hops the
message will travel and XX is the number (in
hexadecimal) of data bytes to be sent.
Use on
All Devices
Note
This command is particularly useful if the
data may contain <CR> and <Backspace>
characters.
Response
> <data being entered>
OK
or ERROR:<errorcode>
After the „>‟ prompt a number of XX characters are
expected to be entered. <errorcode> represents
the error code explained in section 3.
(In case bit 9 of S10 is set a timeout error is
generated if no character is received for 1 second.)
Parameters
XX ranging from 00 to 52 (hexadecimal)
nn ranging from 00 to 30 (decimal)
A maximum of 82 bytes are sent (with attached
EUI only 74 bytes). The response OK shows
successful transmission. Successful transmission
does not guarantee successful reception. To make
sure data has been received by a specific node
use a unicast message. Only neighbours which
are up to nn hops away will receive the broadcast.
If nn=01 only direct neighbours will receive the
broadcast and if n = 00 the entire network will (max
30 hops).
Remote action
Prompt
BCAST:<EUI64>,<length>=<data>
Every node in the PAN which has received the
broadcast message will prompt the above
message where <EUI64> is the address of the
sender and <length> is the length of the message
in hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
Unicasts can be addressed either by
referencing the recipient‟s EUI64, NodeID or
an entry in the address table.
The maximum payload is 82 bytes. It is
reduced by 8 bytes when appending the EUI
to the network header (default) and also it is
reduced by 2 bytes per hop in case a source
route is known. The latter event can neither
be suppressed nor foreseen.
Response
SEQ:XX
OK
or
ERROR:<errorcode>
Where <errorcode> represents the error code
explained in section 4.
Prompt
ACK:XX
or NACK:XX
Up to 82 bytes are sent to the node up to 30 hops
away. On successful transmission the user is
given the transmission‟s sequence number
followed by “OK”. The user is then prompted
“ACK” on receipt of an acknowledgement or
“NACK” in case the message was not
acknowledged. A NACK does not guarantee that
the message has not reached its destination.
Remote action
Prompt
UCAST:[<EUI64>,]<length>=<data>
Where <EUI64> is the address of the sender and
<length> is the length of the message in
hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
EUI64, NodeID or address table index and
XX is the number (in hexadecimal) of data
bytes to be sent.
Use on
All Devices
Notes
This command is particularly useful if the
data may contain <CR> and <Backspace>
characters.
The ACK and/or NACK prompt can be
disabled in S0E
Unicasts can be addressed either by
referencing the recipient‟s EUI64, NodeID or
an entry in the address table.
The maximum payload is 82 bytes. It is
reduced by 8 bytes when appending the EUI
to the network header (default) and also it is
reduced by 2 bytes per hop in case a source
route is known. The latter event can neither
be suppressed nor foreseen.
Response
> <data being entered>
SEQ:XX
OK
or ERROR:<errorcode>
Prompt
ACK:XX
or NACK:XX
Parameters
XX ranging from 00 to 52 (hex)
After the „>‟ prompt a number of XX characters are
expected to be entered. Up to 82 bytes are sent to
the node with address <EUI64>.
In case bit 9 of S10 is set a timeout error is
generated if no character is received for 1 second.
On successful transmission the user is given a
transmission number followed by “OK”. After that
the user is prompted “ACK” on receipt of an
acknowledgement or “NACK” in case the message
was not acknowledged. A NACK does not
guarantee that the message has not reached its
destination.
Remote action
Prompt
UCAST:[<EUI64>,]<length>=<data>
Where <EUI64> is the address of the sender and
<length> is the length of the message in
hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
- When bit 8 of S10 is set, if a sink
cannot be reached for three
consecutive transmissions the sink is
assumed unavailable and a new one
is sought
- The ACK and/or NACK prompt can
be disabled in S0E
- When attaching the node‟s EUI64 to
the network frame the maximum
payload reduces to 74 bytes
- The maximum payload is 82 bytes. It
is reduced by 8 bytes when
appending the EUI to the network
header (default) and also it is reduced
by 2 bytes per hop in case a source
route is known. The latter event can
neither be suppressed nor foreseen.
Response
SEQ:XX
OK
or ERROR<errorcode>
Where <errorcode> represents the error code
explained in section 3.
Prompt
ACK:XX
or NACK:XX
Parameters
Up to 82 bytes are sent to the node‟s sink. On
successful transmission the user is given the
sequence number followed by “OK”. After that the
user is prompted “ACK” on receipt of an
acknowledgement or “NACK” in case the message
was not acknowledged. A NACK does not
guarantee that the message has not reached its
destination.
Remote action
Prompt
UCAST:[<EUI64>,]<length>=<data>
Where <EUI64> is the address of the sender and
<length> is the length of the message in
hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
Where XX is the number (in hexadecimal) of
data bytes to be sent.
Use on
All Devices
Notes
- When bit 8 of S10 is set, if a sink
cannot be reached for three
consecutive transmissions the sink is
assumed unavailable and a new one
is sought.
- The ACK and/or NACK prompt can
be disabled in S0E
- When attaching the node‟s EUI64 to
the network frame the maximum
payload reduces to 74 bytes
- The maximum payload is 82 bytes. It
is reduced by 8 bytes when
appending the EUI to the network
header (default) and also it is reduced
by 2 bytes per hop in case a source
route is known. The latter event can
neither be suppressed nor foreseen.
Response
> <data being entered>
SEQ:XX
OK
or ERROR<errorcode>
Parameters
XX ranging from 00 to 52 (hex)
After the „>‟ prompt a number of XX characters are
expected to be entered. A maximum of 82 bytes
are sent to the network‟s sink.
(In case bit 9 of S10 is set a timeout error is
generated if no character is received for 1 second.)
On successful transmission the user is given a
transmission number followed by “OK”. After that
the user is prompted “ACK” on receipt of an
acknowledgement or “NACK” in case the message
was not acknowledged. A NACK does not
guarantee that the message has not reached its
destination.
Remote action
Prompt
UCAST:[<EUI64>,]XX=<data>
Where <EUI64> is the address of the sender and
<length> is the length of the message in
hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
Search for a sink on the network by sending
a broadcast causing all sinks to reply.
By default, if a sink is already known and no
better sink is found, no prompt will be
displayed.
A sink which is already known can be found
at index 05 of the address table.
Use on
All Devices
Response
OK or ERROR<errorcode>
Prompt
SINK:<EUI64>,<NodeID> or
ADSK:<EUI64>,<NodeID>
<errorcode> represents the error code explained in
section 3.
SW release
R300 ●
+MCAST – Transmit A Multicast
Execute Command
AT+MCAST:nn,<ID>,<data>
Use on:
All devices
Notes
- When attaching the node‟s EUI64 to
the network frame the maximum
payload reduces to 74 bytes
- Entries in the multicast table must be
set to endpoint 01 to trigger the
desired prompt
- Use multicasts sparingly! They are a
form of broadcast so any node may
only repeat or originate up to 8
multicasts in every 8 second interval.
Response
OK or ERROR<errorcode>
Where <errorcode> represents the error code
explained in section 3.
Parameters
nn ranging from 00 to 30
Up to 82 bytes are sent to the multicast group
<ID>. The response OK shows successful
transmission. Successful transmission does not
guarantee successful reception. To make sure
data has been received by a specific node use a
unicast message. Only neighbours which are up to
nn hops away will receive the broadcast. If nn = 01
only direct neighbours will receive the broadcast
and if nn = 00 the entire network will (max. 30
hops).
Remote action
Prompt
MCAST:[<EUI64>,]<Length>=<data>
Where <EUI64> is the address of the sender and
<length> is the length of the message in
hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
Where XX is the number (in hexadecimal) of
data bytes to be sent and nn is the number of
hops the message will travel.
Use on
All Devices
Notes
When attaching the node‟s EUI64 to the
network frame the maximum payload
reduces to 74 bytes
This command is particularly useful if the
data may contain <CR> and <Backspace>
characters.
Use multicasts sparingly! They are a form of
broadcast so any node may only repeat or
originate up to 8 multicasts in every 8 second
interval.
Response
> <data being entered>
OK
or ERROR<errorcode>
After the „>‟ prompt a number of XX characters are
expected to be entered. <errorcode> represents
the error code explained in section 3.
In case bit 9 of S10 is set a timeout error is
generated if no character is received for 1 second.
Parameters
XX ranging from 00 to 52 (hex)
nn ranging from 00 to 30
Up to 82 bytes are sent to devices up to nn hops
away. The response OK shows successful
transmission. Successful transmission does not
guarantee successful reception. To make sure
data has been received by a specific node use a
unicast message. Only neighbours which are up to
nn hops away will receive the broadcast. If nn=01
only direct neighbours will receive the broadcast
and if n = 00 the entire network will.
Remote action
Prompt
MCAST:[<EUI64>,]<length>=<data>
Where <EUI64> is the address of the sender and
<length> is the length of the message in
hexadecimal. The EUI64 is only displayed if it is
part of the network header (set bit 0 of S10 to
disable attaching the EUI64 to outgoing
messages).
Where <address> can be the remote node‟s
EUI64, NodeID or address table index
Use on
All Devices
Note
Opening a serial link to end devices will
result in a limited data rate which depends on
the polling interval of the child.
In Data mode all prompts are disabled
Response
SEQ:XX
OK
or
ERROR<errorcode>
Prompt
ACK:XX
or NACK:XX
<errorcode> represents the error code explained in
section 3 and XX is the sequence number of the
unicast.
Remote Prompt
DataMODE:<NodeID>,<EUI64>
OPEN
Where <NodeID> is the NodeID of the
remote node and <EUI64> is its EUI64.
Prompt
DataMODE:<NodeID>,<EUI64>,<errorcode>
[OPEN]
Where <NodeID> is the NodeID of the remote
node and <EUI64> is its EUI64. Only if the
errorcode equals 0 the data mode will open
.
SW release
R302 ●
+++ – Leave Data Mode
Execute Command
+++
To Leave data mode +++ must be entered at
a minimum of 500ms after the last character
which is to be transmitted to the remote
node. In case the data payload contains +++
it can be transmitted safely as long as it is
made sure no more than 250ms pass
between sending +++ and the previous
character.
<errorcode> represents the error code explained in
section 3.
Plays a tune on a remote devboard if the Beeper is
connected. Useful to identify remote nodes. See
devkit manual for details about connecting a
buzzer to the ETRXn.
Can be useful to quickly exchange bulk data
with neighbouring node. The application
needs to handle addressing, error checking,
retries and acknowledgements.
AT+RDATAB generates broadcasts so any
node may only originate up to 8 broadcasts
in every 8 second interval. Broadcasts use a
lot of bandwidth.
End Devices do not receive raw data.
Raw data will only travel one hop.
Use with great care. Raw data messages
are not ZigBee-compliant and may even leak
into other PANs.
Response
> <data being entered>
OK
or ERROR:<errorcode>
Parameters
XX ranging from 00 to 67 (hex)
After the „>‟ prompt a number of XX characters are
expected to be entered. Up to 103 bytes of data
can be send to all nodes within reach (direct
neighbours)
The data is neither encrypted nor error checked.
No retries are made and no acknowledgement is
received.
<errorcode> represents the error code explained in
section 3.
Remote action
Prompt
RAW:snn,<data>
where snn is the RSSI, or
<data>
in case bit 9 of S0E is set. Displaying the data can
also be disabled by setting bit D of S0E.
00 Everything OK - Success
01Couldn’t poll Parent because of Timeout
02 Unknown command
04 Invalid S-Register
05 Invalid parameter
06 Recipient could not be reached
07 Message was not acknowledged
08 No sink known
09 Address Table entry is in use and cannot be modified
0A Message could not be sent
0B Local node is not sink
0C Too many characters
0E Background Scan in Progress (Please wait and try again)
0F Fatal error initialising the network
10 Error bootloading
12 Fatal error initialising the stack
18 Node has run out of Buffers
19 Trying to write read-only register
1A Data Mode Refused by Remote Node
1B Connection Lost in Data Mode
1C Remote node is already in Data Mode
20 Invalid password
25 Cannot form network
27 No network found
28 Operation cannot be completed if node is part of a PAN
2C Error leaving the PAN
2D Error scanning for PANs
33 No response from the remote bootloader
34 Target did not respond during cloning
35 Timeout occurred during xCASTB
39 MAC Transmit Queue is Full
70 Invalid Operation
72 More than 10 unicast messages were in flight at the same time
74 Message too long
80 ZDP Invalid Request Type
81 ZDP Device not Found
82 ZDP Invalid Endpoint
83 ZDP Not Active
84 ZDP Not Supported
85 ZDP Timeout
86 ZDP No Match
87 ZDP Table Full
88 ZDP No Entry
89 ZDP No Descriptor
91 Operation only possible if connected to a PAN
93 Node is not part of a Network
94 Cannot join network
96 Mobile End Device Move to new Parent Failed
98 Cannot join ZigBee 2006 Network as Router
A1 More than 8 broadcasts were sent within 8 seconds
AB Trying to join, but no beacons could be heard
AC Network key was sent in the clear when trying to join secured
AD Did not receive Network Key
AE No Link Key received
AF Preconfigured Key Required
C5 NWK Already Present
C7 NWK Table Full
C8 NWK Unknown Device
With a few exceptions the S-registers are stored in non-volatile memory and will keep their user
defined settings unless reset to the factory defaults using the “AT&F” command. S16, S18, S1A,
S1B, S1D, S39, S40 and S42 are directly accessing volatile I/O registers to prevent memory
corruption due to constant I/O access. Registers S17, S19, S1C, S1E, S3A, S41 and S43
represent the non-volatile registers which define the contents of S16, S18, S1B, S1D, S39, S40
and S42 respectively after booting up or reset.
4.1 Recovery of the Factory Default Settings
If the unit seems to be unresponsive to commands on the serial port this is most often due to the
unit having been set into a power-down mode or the set-up for the serial connection having been
altered. To overcome this a feature has been added which performs a factory reset on any module
which seems unresponsive. To factory reset a module, connect it to the PC‟s serial port and
execute the Factory Reset Tool (downloadable from www.telegesis.com). When pressing the
Reset button on the Reset Tool you are prompted to cause a hardware reset to the module by
pulling the module‟s reset line low for more than 100ms (done by pressing the reset button on the
Development Board). Once completed, the factory default settings of the ETRXn module are
restored.
The channel mask does not affect the
AT+JPAN command
Storage
Non-Volatile
Parameters
XXXX
Where XXXX represents a 16-bit decimal number
enabling IEEE 802.15.4 channel numbers 11 to 26.
Writing a bit to 1 enables a channel and
subsequently writing a bit to 0 disables a channel
for scanning, joining and establishing networks.
e.g. when setting S00 to 0001, only channel 11 will
be used for all following operations.
Range
0001- FFFF
Factory Default
ETRX3 LRS-Variants: 7FFF
Others: FFFF
SW release
R302 ●
S01 – Transmit Power Level
Description
The device‟s transmit power level in dBm.
Operations
R/W LOCAL
R/W REMOTE
Notes
The output power of the ”-PA” and “-LR”
variants is higher than the value in S01.
Please refer to the respective hardware
manuals.
The ETRX357-LRS power is reduced for EC
regulatory compliance. See the hardware
manual.
Becomes effective
When Joining or establishing a PAN
Storage
Non-Volatile
Parameters
snn
Where snn represents a signed 8-bit decimal
number.
Range
ETRX2: 4 to -43
ETRX3: 8 to -43
ETRX3 LRS Variants: -7 to -43
Actual values are {8, 7, 6, 5, 4, 3, 2, 1, -1, -2, -3, -4,
-5, -6, -7, -8, -9, -11, -12, -14, -17, -20, -26, -43}
Entering a value not on this list (such as –19) will
result in the next lowest output power.
Entering a value higher than 3 will automatically
enable boost mode regardless of the setting of bit
E of S11.
Two networks operating on the same
channel with the same PAN ID, but a
different EPID are detected to be in conflict
with each other. PAN ID conflicts are
detected by the stack and resolved by one of
the networks dynamically changing its PAN
ID.
The preferred PID does not affect the
AT+JPAN command
Storage
Non-Volatile
Parameters
<PID>
Where <PID> represents a 16-bit hexadecimal
number
Range
0000 – FFFF
When establishing a PAN the coordinator will pick
a random PAN ID if S02 is set to 0000. If set to
any value between 0001 and FFFF this number will
be used as PAN ID instead, unless trying to use a
PAN ID which already exists on the same channel.
In this case a random PAN ID will be used instead.
When joining only a PAN with the ID stored in S02
will be joined unless S02 is set to 0000. In this
case the next best PAN which allows joining is
joined.
Factory Default
0000
SW release
R300 ●
S03 – Preferred Extended PAN ID
Description
The extended PAN ID.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
When Joining or establishing a PAN
Note
The EPID is used for PAN ID conflict
detection. It is therefore recommended to
use a random EPID at all times.
The preferred EPID does not affect the
AT+JPAN command
Storage
Non-Volatile
Parameters
<EPID>
Where <EPID> represents a 64-bit hexadecimal
number
Range
0000000000000000 – FFFFFFFFFFFFFFFF
When establishing a PAN the coordinator will pick
a random EPID if S03 is set to all 0‟s. If set to any
other value this number will be used as EPID
instead.
When joining only a PAN with the EPID stored in
S03 will be joined unless S03 is set to all 0‟s. In
this case the next best PAN which allows joining is
joined.
For security reasons this register is password
protected. The default password for R3xx is
“password”.
See section regarding secure networks
To block joining, set either bit 5 on the trust
centre or bit 0 on every node. Built-in function
0017 only overrides bit 0
Storage
Non-Volatile
Parameters
XXXX
Where XXXX represents a 16-bit hexadecimal
number.
Range
0000 to FFFF
Bit E-F: Device Selection
Bit F
Bit E
Device Type
0 0 Router (FFD)
1 0 End Device
0 1 Sleepy End Device
1 1 Mobile End Device
Bit D: Reserved
Bit C: Reserved
Bit B: Set: Enable custom endpoint 2
Bit A: Set: When joining don‟t ask for Trust
Centre link key
Bit 9:Set: Don‟t use central Trust Centre
(distributed TC Mode)
Bit 8: Set: Use Pre-Configured Trust Centre
Link Key when joining
Bit 7: Set: Trust centre uses hashed link key
Bit 6: Reserved
Bit 5: Set: Don‟t allow nodes to join (TC setting)
Bit 4: Set: Send Network key encrypted with the
link key to nodes joining
Bit 3: Set: Don‟t allow nodes to re-join
unsecured
Bit 2: Set: Send Network key encrypted with the
link key to nodes re-joining unsecured
Bit 1: Reserved
Bit 0: Set: Don‟t allow other nodes to join the
On the ETRX2 series IRQ0,1,2,3 are
generated by logic transitions on inputs
I/O0,1,10,11 respectively, on the ETRX3
series they are generated by logic level
transitions on PA0, PA1, PB0 and PB6
respectively
Storage
Non-Volatile
Parameters
XXXX
Where XXXX represents a 16-bit hexadecimal
number.
Bit F (MSB): Set: I/O3 (ETRX2) or PB7 (ETRX3) is
PWM as defined by S1B/S1D.
Unset: Standard I/O pin.
Bit E: Set: Enable Boost Mode
Bit D: Set: Present 1.2V A/D-Reference at I/O0
during measurement (ETRX2 only)
Bit C: Set: I/O8 turns into A/D3, which can be read
from S21 (ETRX2 only)
Bit B: Set: Pad 38 turns into A/D4, which can be
read from S22 (ETRX2 only)
Bit A: Reserved
Bit 9: Set: Enable wakeup on UART activity (1st
input character is discarded)
Bit 8: Set: Enable 100ms debouncing for all IRQs
Bit 7: Set: IRQ3 on rising edge
Bit 6: Set: IRQ3 on falling edge
Bit 5: Set: IRQ2 on rising edge
Bit 4: Set: IRQ2 on falling edge
Bit 3: Set: IRQ1 on rising edge
Bit 2: Set: IRQ1 on falling edge
Bit 1: Set: IRQ0 on rising edge
Bit 0: Set: IRQ0 on falling edge
The device‟s RS232 Baudrate and mode.
The default setting of 0500 results in:
19200bps, no parity, 1 stop bit, 8 data bits.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Note
If bit 5 is set, bi-directional Hardware Flow
Control is used instead of XON/XOFF flow
control. If using Hardware flow control I/O4
or PB4 becomes the RTS output and the
CTS input is assigned to I/O2 or PB3.
Access to these I/Os via S16, S18 is blocked
whilst Hardware Flow control is active. Note
that in case the 128-byte output buffer of the
ETRX2 is full data will be dropped.
The parity settings do not affect the bytes
transmitted over the air.
Storage
Non-Volatile
Parameters
XXXX
Where XXXX represents a 16-bit hexadecimal
number.
bit 7 set: Enable STX ETX wrapper
bit 6 Reserved
bit 5 set: H/W flow control enable
bit 4 set: no command echo
bit 3 set: 7 data bits instead of 8
bit 2 set: 2 stop bits instead of one
bit 1 set: odd parity enabled
bit 0 set: even parity enabled
This Register is not used on the ETRX2. On
the ETRX3 it is used to enable alternate
functionalities for each I/O pin. When set to
zero the corresponding I/O pin is a standard
I/O pin, when set to 1 any other setting for
this I/O are overwritten by the peripheral
functionality.
representing the I/O pins
xxxxxxxx
<PC7…PC0><PB7…PB0><PA7…PA0>
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
After Reset
Storage
Non-Volatile
Parameters
XXXXXXXX
Where XXXXXXXX represents a 32-bit
hexadecimal number.
bit 31 reserved
bit 30 reserved
bit 29 reserved
bit 28 reserved
bit 27 reserved
bit 26 reserved
bit 25 reserved
bit 24 reserved
bit 23 reserved (PC7)
bit 22 reserved (PC6)
bit 21 Set: Enable TX_Active (reserved on –LR)
bit 20 reserved (PC4)
bit 19 reserved (PC3)
bit 18 reserved (PC2)
bit 17 Set: Enable ADC3 (PC1)
bit 16 reserved (PC0)
bit 15 Set: Enable ADC2 (PB7)
bit 14 Set: Enable ADC1 (PB6)
bit 13 Set: Enable ADC0 (PB5)
bit 12 Set: reserved
bit 11 Set: reserved
bit 10 Set: Enable RXD input (PB2)
bit 9 Set: Enable TXD output (PB1)
bit 8 Set: Enable Vref Output (PB0)
bit 7 reserved (PA7)
bit 6 reserved (PA6)
bit 5 reserved (PA5)
bit 4 reserved (PA4)
bit 3 reserved (PA3)
bit 2 reserved (PA2)
bit 1 reserved (PA1)
bit 0 reserved (PA0)
ETRX3: representing the I/O pins
xxxxxxxx <PC7…PC0> <PB7…PB0> <PA7…PA0>
S1A represents the logic level at each pin of the
I/O port.
Factory Default
n/a
SW release
R300 ●
S1B – PWM Pin Top Value
Description
The mode of operation for the special
function pin
Operations
R/W LOCAL
R/W REMOTE
Operations
Instantly
Storage
Volatile
Parameters
XXXX
Range
0000 to FFFF
This register represents the top value of the 16-bit
counter counting from 0 to top repeatedly
incrementing at 12MHz. When reaching top I/O3 is
set, given that the PWM is enabled in S11.
The initial setting of S1B stored in non
volatile memory
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
After Soft or Hard Reset
Storage
Non-Volatile
Parameters
XXXX
Where XXXX represents the initial value of S1B
which is loaded after boot-up, soft or hard reset.
Factory Default
3A98 (800Hz 50% m/s ratio)
SW release
R300 ●
S1D – PWM Pin Compare Value
Description
The mode of operation for the special
function pin
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Volatile
Parameters
XXXX
Range
0000 to FFFF
If the special function pin is enabled by setting bit F
of S11, this register represents the compare value
of the 16-bit counter counting from 0 to top
repeatedly incrementing at 12MHz. When
reaching compare I/O3 is cleared.
Factory Default
Defined in S1E
SW release
R300 ●
S1E – Initial Value S1D
Description
The initial setting of S1D stored in non
volatile memory
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
After Soft or Hard Reset
Storage
Non-Volatile
Parameters
XXXX
Where XXXX represents the initial value of S1D
which is loaded after boot-up, soft or hard reset.
ETRX3: Only when bit 13 of S15 is set,
invalid otherwise
Operations
R LOCAL
R REMOTE
Becomes effective
Instantly
Storage
Instant Reading of analogue input
Parameters
XXXX
Representation
The hexadecimal reading of the analogue input in
mV (mV * 10 on the ETRX3) with respect to
ground. The return value will be undefined in case
the corresponding A/D converter has not been
enabled.
ETRX3: Only when bit 14 of S15 is set,
invalid otherwise
Operations
R LOCAL
R REMOTE
Becomes effective
Instantly
Storage
Instant Reading of analogue input
Parameters
XXXX
Representation
The hexadecimal reading of the analogue input in
mV (mV * 10 on the ETRX3) with respect to
ground. The return value will be undefined in case
the corresponding A/D converter has not been
enabled.
ETRX2: Only when bit C of S11 is set, invalid
otherwise
ETRX3: Only when bit 15 of S15 is set,
invalid otherwise
Operations
R LOCAL
R REMOTE
Becomes effective
Instantly
Storage
Instant Reading of analogue input
Parameters
XXXX
Representation
The hexadecimal reading of the analogue input in
mV (mV * 10 on the ETRX3) with respect to
ground. The return value will be undefined in case
the corresponding A/D converter has not been
enabled.
Range
ETRX2: Only when bit B of S11 is set, invalid
otherwise
ETRX3: Only when bit 17 of S15 is set,
invalid otherwise
Operations
R LOCAL
R REMOTE
Becomes effective
Instantly
Storage
Instant Reading of analogue input
Parameters
XXXX
Representation
The hexadecimal reading of the analogue input in
mV (mV * 10 on the ETRX3) with respect to
ground. The return value will be undefined in case
the corresponding A/D converter has not been
enabled.
Range
S23 – Immediate Functionality At IRQ0 (ETRX2: I/O0 ETRX3:PA0)
Description
Describes the immediate action taken on
IRQ0.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of available functionalities.
Factory Default
0001 (Wakeup to power mode 0)
SW release
R300 ●
4.5 S-Registers Defining the Functionality of the Module
There are 14 events which can trigger a user-selectable action to prevent the need for a host
microcontroller for simple applications. Four out of those 14 events are the external interrupts
which can be enabled in Register S11. The actions to be performed on those four interrupt events
are defined in S23 to S26. The user can pick any of the actions from the list in section 5 of this
document and assign them to any event.
Another event is triggering when the unit is reset or power cycled and also joining a network
triggers an event.
The remaining 8 events are timed events. Registers S29 to S38 control those 8 timers and their
corresponding events. Please note that the first 4 timers are used by default for network
management tasks, which can be modified by the user when changing the corresponding
registers. A timer will increment every 250ms (4 times a second) and when the timer reaches the
value stored in the timer/counter register the corresponding action will be executed.
A multipurpose Timer/Counter whose
functionality is defined by S2A
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed.
If set to 0 the corresponding functionality is
disabled.
Factory Default
0004 (1s interval)
SW release
R300 ●
S2A – Functionality For Timer/Counter 0
Description
Defines the functionality for Timer/Counter 0
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
A multipurpose Timer/Counter whose
functionality is defined by S2C
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed.
If set to 0 the corresponding functionality is
disabled.
Factory Default
00F0 (1 min interval)
SW release
R300 ●
S2C – Functionality For Timer/Counter 1
Description
Defines the functionality for Timer/Counter 1
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
Factory Default
821E (advertise sink for 30 hops and create
aggregation routes to COO and sinks)
A multipurpose Timer/Counter whose
functionality is defined by S2E
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed.
If set to 0 the corresponding functionality is
disabled.
Factory Default
00F4 (1 min 1s interval)
SW release
R300 ●
S2E – Functionality For Timer/Counter 2
Description
Defines the functionality for Timer/Counter 2
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
A multipurpose Timer/Counter whose
functionality is defined by S30
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed.
If set to 0 the corresponding functionality is
disabled.
Factory Default
00F2 (1min interval)
SW release
R300 ●
S30 – Functionality For Timer/Counter 3
Description
Defines the functionality for Timer/Counter 3
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
A multipurpose Timer/Counter whose
functionality is defined by S32
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed.
If set to 0 the corresponding functionality is
disabled.
Factory Default
0000
SW release
R302 ●
S32 – Functionality For Timer/Counter 4
Description
Defines the functionality for Timer/Counter 4
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
A multipurpose Timer/Counter whose
functionality is defined by S34
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed.
If set to 0 the corresponding functionality is
disabled.
Factory Default
0000
SW release
R300 ●
S34 – Functionality For Timer/Counter 5
Description
Defines the functionality for Timer/Counter 5
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
A multipurpose Timer/Counter whose
functionality is defined by S36
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed. If set to 0 the corresponding
functionality is disabled.
Factory Default
0000
SW release
R300 ●
S36 – Functionality For Timer/Counter 6
Description
Defines the functionality for Timer/Counter 6
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
A multipurpose Timer/Counter whose
functionality is defined by S38
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
A 16-bit hexadecimal number representing a
threshold for either a timer or counter event to be
triggered. When reading this register the threshold
rather than the actual timer/counter value is
displayed. If set to 0 the corresponding
functionality is disabled.
Factory Default
0000
SW release
R300 ●
S38 – Functionality For Timer/Counter 7
Description
Defines the functionality for Timer/Counter 6
events.
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Storage
Non-Volatile
Parameters
XXXX
If set to 0 the functionality is disabled. Please see
section 5 for a list of the functionalities.
Same effect as AT+MSET, but can be set at
boot-up by built-in functionality
Storage
Non-Volatile
Parameters
XXXX
If S3E is not set to all 0‟s multicast table entry 1 to
endpoint 1 (the AT command layer‟s endpoint) is
set with the setting of this register is created
instantly and after a reset.
Factory Default
0000
SW release
R300 ●
S3F – Multicast Table Entry 01
Description
The ID portion of Multicast Table Entry 01
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
Instantly
Note
As for S3E
Storage
Non-Volatile
Parameters
XXXX
If S3F is not set to all 0‟s multicast table entry 2 to
endpoint 1 (the AT command layer‟s endpoint) is
set with the setting of this register is created
instantly and after a reset.
XXYY
Where YY is the timeout in seconds left shifted by
XX (YY * 2^XX). The default number results in a
timeout of 5 Minutes, whereas the maximum
number results in a timeout of approximately 48
days.
Maximum
0EFF
Factory Default
0605
SW release
R303 ●
S4F – MAC Timeout
Description
Register defining the MAC timeout
Operations
R/W LOCAL
R/W REMOTE
Becomes effective
After Soft or Hard Reset
Storage
Non-Volatile
Parameters
XXXX
The Ember_Indirect_Transmission_Timeout is the
amount of time in milliseconds that the MAC will
hold a message for indirect transmission to a child.
In addition to this is also basis for the timeout after
which an acknowledged unicast is nacked in case
no ack is received.
No operation of the corresponding interrupt/timer/counter
0001
Change to power mode 0.
0002
Change to power mode 1.
0003
Change to power mode 2.
0004
Change to power mode 3.
…
Reserved
0010
If I am an end device Poll Parent for data.
0011
Update the Network key with new random key.
0012
Check for other devices on the network. If no other devices could be found for three
consecutive tries, attempt a rejoin using the current network key each time this functionality
is triggered. Note: No functionality on COOs.
0013
Check for other devices on the network. If no other devices could be found for three
consecutive tries, attempt a rejoin using the known network key. If this is unsuccessful try
an unsecured rejoin each time this functionality is triggered from there on. Note: No
functionality on COOs.
0014
Check for other devices on the network. If no other devices could be found for three
consecutive tries, attempt a rejoin using the known network key. If this is unsuccessful try a
rejoin using the current link key the next time this functionality is triggered. If this is
unsuccessful leave the current network the next time this action is triggered. Note: No
functionality on COOs.
0015
In case I am not joined to a network scan for and join the next best
0016
Reserved
0017
Allow joining via the local node for 60 Seconds (when it is disabled using bit 0 of S0A)
0018
Copy local Inputs to Remote outputs: Read Local S1A and if changed since the previous
time, write the reading into the remote S18 whose address is given in S3B.
001D
End Data Mode (if active)
003x
Toggle I/Ox
004x
Flash I/Ox (pull low) for 250ms
005x
Set I/Ox to 0
006x
Set I/Ox to 1
0108
The unit sends the contents of S3B to the networks sink.
0109
The unit sends the contents of S3C to the networks sink.
0110
Sends the reading of the I/O, A/D1 & A/D2 or ADC0 & ADC1 and Vcc as well as an 8-bit
transmission counter which increments with every transmission to the network‟s sink, and if
no sink is known the unit will search for a sink immediately when bit 8 of S10 is set.
0111
Same as 0110, but to charge an external RC timer ETRX2:I/O7 or ETRX3:PA3 is pulled
high whilst sending the data and left high impedance the rest of the time.
0112
Send a Tracking Message to all nearby routers which will forward this message and the
RSSI reading to their nearest sink.
5 Build in Functionality
The following table gives an overview of the built-in functionality which can be triggered either by
the four external interrupts, boot-up, joining a network, or by 8 individually programmable
timers/counters. If the node is in a low power mode and the action requires the node to wake up,
the node will do so and go back to its original power mode after completion of the action. When
triggered by a timer the timer will restart only in case the most significant bit of the action is set to 1
(e.g. instead of 0001 set 8001).
Same as 0112, but to charge an external RC timer ETRX2:I/O7 or ETRX3:PA3 is pulled
high whilst sending the data and left high impedance the rest of the time.
0114
Same as 0112, but tracking message doesn‟t contain ADC readings to save power on
tracked device (TRACK2 Prompt)
0115
Same as 0114, but to charge an external RC timer ETRX2:I/O7 or ETRX3:PA3 is pulled
high whilst sending the data and left high impedance the rest of the time.
0120
Sends the contents of S3B as a RAW transmission.
0121
Sends the contents of S3C as a RAW transmission.
0130
Sends to the network‟s sink the reading of the I/O, an 8-bit transmission counter which
increments with every transmission, the contents of S46 and the reading of any A/D [1..4]
enabled in S15 (ETRX3) or S11 (ETRX2). If no sink is known the unit will search for a sink
immediately when bit 8 of S10 is set
0131
Same as 0130, but to charge an external RC timer ETRX2:I/O7 or ETRX3:PA3 is pulled
high whilst sending the data and left high impedance the rest of the time.
02XX
If I am a Sink advertise me for x hops (max. no. of hops: 30). If I am a COO create
aggregation routes needed for Trust Centre. NB message does not reach end devices
when parent already knows a sink address
0300
Increment S46
0301
Decrement S46
0302
Clear S46
0400
Show status on ETRX2:I/O3, ETRX3:PA7. LED on (pin driven low) = no connection.
Blinking fast = Auto-searching for PAN. Blinking slow = connected to PAN. The
accompanying counter register defines the update interval. Note: I/O3/PA7 must be defined
to be an output.
0401
Show status on ETRX2:I/O10, ETRX3:PB7. LED on (pin driven low) = no connection.
Blinking fast = Auto-searching for PAN. Blinking slow = connected to PAN. The
accompanying counter register defines the update interval. Note: I/O10/PB7 must be
defined to be an output.
2000
When triggered the number of times listed in the accompanying counter a message is sent
to the sink containing a transmission counter and the reading of the analogue and digital
inputs. Note: Can only be triggered by setting S23, S24, S25 or S26 to 24XX .
2001
When enabling this action the command line is disabled and as soon as a number of bytes
in excess of the number N specified in the accompanying timer/counter register is received
on the serial port, a SCAST containing these characters is sent to the network‟s sink.
Notes: This event is triggered by receiving a character on the serial port. N ≤ 64.
2100
The contents of S3B is sent to the local command line followed by carriage return. Note:
No AT-Prefix required!
2101
The contents of S3C is sent to the local command line followed by carriage return. Note:
No AT-Prefix required!
24XX
Start timers masked in XX.
25XX
Toggle timers masked in XX.
26XX
Stop timers masked in XX.
3XXX
Change I/O port to the LSBs.
4XXX
Change data direction of the I/O port to the LSBs.
As the module‟s power consumption is firmware dependent, the values in the following tables
supersede any of the numbers given in previous revisions of the AT command dictionary. Table 7
gives the hardware dependent theoretical figures for the ETRX2 as stated in the current hardware
manual, whereas Table 8 shows the firmware dependent average power consumption of an
ETRX2 measured with light to medium network traffic. For more details please refer to the
separate application note regarding power consumption, which can be found on
www.telegesis.com.
Typical values at 3.3V 25°C.
Table 7: Power Consumption
Table 8: Averaged power consumption during operation
Notes:
- Sleep modes 1-3 should not be used on a router or coordinator, however it was found that mode 1
may work on a router with light to medium network traffic. Successful operation of a router in mode
1 cannot be guaranteed and needs to be evaluated carefully for each target application in case the
additional energy saving is vital.
- Wakeup from mode 3 is only possible by external interrupt or reset. Make sure never to set the
initial power mode (S3A) to mode 03 unless you want the device to always wake up into this mode.
- Modules in power mode 2 and 3 will not respond to commands on the command line, so always
make sure you have defined means to wake it up from these modes.
- If no means of waking up from any of the power down modes has been defined and the module
appears unresponsive the Telegesis factory default resetter can be used to reset the modules
factory defaults via the serial port.
- In order to achieve ultra low power consumption of sub 1µA it is required to either define all I/Os to
be outputs, or to pull all inputs to a defined level as floating input pins will increase the current
consumption. Furthermore as described in the hardware manual a pull-down of 10kΩ must be
attached to the SIF_MOSI pin for lowest possible power consumption.
Assuming the unit polls every second. If no polling and other timed actions are performed the power
consumption can be as little as 1.5µA in this mode.
On the EM250 as well as the EM35x, the LQI is closely related to the SNR (signal noise ratio).
The graph below shows the relation between the SNR and the LQI reading on the EM250, which is
the basis of the ETRX2 series of modules.
From the LQI the stack calculates the cost for a particular link based on the following table:
On the ETRX2 and ETRX3 series modules the readings from AT+ESCAN represent the
hexadecimal readings from the RSSI register of the EM250 or EM35x, offset by +127 to make it a
positive number. AT+ESCAN returns the background radio power so that the quietest channel can
be selected for a new network; if you want to measure the RSSI of incoming messages you must
set bit C of register S10 (see page 60).
The EM250 and EM35x SoCs calculate the RSSI over an 8-symbol period as well as at the end of
a received packet. They utilize the RX gain settings and the output level of the ADC within its
algorithm. The linear range of RSSI is specified to be 40dB over all temperatures. At room
temperature, the linear range is approximately 60dB (-90 dBm to -30dBm).
R305 firmware can be loaded on to an ETRX2 by bootloading through the serial port or by reflashing with an Ember Insight Adaptor. Cloning over the air is tricky because the new R305 node
and the old R2xx node will not join the same PAN. It is possible to clone by using an extra R2xx
device, as shown in the step-by-step guide below.
All trademarks, registered trademarks and products names are the sole property of their respective
owners.
11 Disclaimer
Product and Company names and logos referenced may either be trademarks or registered
trademarks of their respective companies. We reserve the right to make modifications and/or
improvements without prior notification. All information is correct at time of issue. Telegesis (UK)
Ltd. does not convey any license under its patent rights or assume any responsibility for the use of
the described product.